Generating Adversarial Attacks in the Latent Space

Nitish Shukla, Sudipta Banerjee

Adversarial attacks in the input (pixel) space typically incorporate noise margins such as $L_1$ or $L_{\infty }$-norm to produce imperceptibly perturbed data that confound deep lea…